
$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/9572FAF41D1B11F1B62EA9A5103D8C67.roa
File: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (raw, json)
Hash identifier: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=
Subject key identifier: AE:9B:E7:7F:E7:61:91:5E:88:36:C5:30:1A:55:E2:68:6C:BD:0F:DD
Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Certificate serial: 3B
Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/9572FAF41D1B11F1B62EA9A5103D8C67.roa
Signing time: Wed 11 Mar 2026 07:26:14 +0000
ROA not before: Wed 11 Mar 2026 07:26:14 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152194
IP address blocks: 43.226.20.0/22 maxlen: 24
103.45.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD
Validity
Not Before: Mar 11 07:26:14 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69b11916-3036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:50:b0:7c:dd:15:1c:99:8c:4e:75:74:0a:
16:fa:e3:21:51:cd:9e:54:9d:e2:a2:f3:12:9d:06:
a4:9a:9a:51:c2:6c:c2:28:99:65:c2:19:9c:63:94:
43:b3:7c:02:11:fe:08:6a:d4:eb:6d:24:97:fb:00:
e8:2c:c7:e6:1b:76:77:81:9a:c0:ba:a7:10:ea:39:
40:da:5d:82:b4:7c:cb:b2:bd:76:11:12:7b:ba:fa:
a2:5b:3f:5a:5c:7a:68:b0:66:99:d7:a7:88:1c:de:
ef:9b:c3:08:8f:a8:93:89:4a:09:33:54:53:c3:a1:
60:8a:a2:96:ca:f3:3e:4e:19:8c:06:ce:d0:ce:f1:
5a:54:53:0a:93:96:c2:09:58:3c:34:eb:8b:23:6d:
6a:da:7b:51:ef:b9:4b:7e:0e:57:d9:ae:f1:4f:6d:
80:db:fb:e3:3e:6b:a3:40:34:a0:95:82:3e:fa:f5:
b4:a8:aa:b4:8d:43:b3:25:3a:bf:91:24:9b:63:5b:
06:25:63:8b:23:13:85:72:94:35:55:0a:8a:60:40:
ca:09:4a:32:06:e4:80:69:d0:56:6e:49:92:0c:b8:
c4:88:2e:01:67:7d:8c:18:e2:ce:7d:b6:09:a2:83:
2c:48:c4:8d:9f:eb:b5:4b:9f:12:24:a5:dc:da:bc:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:E7:7F:E7:61:91:5E:88:36:C5:30:1A:55:E2:68:6C:BD:0F:DD
X509v3 Authority Key Identifier:
keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/9572FAF41D1B11F1B62EA9A5103D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.20.0/22
103.45.68.0/22
Signature Algorithm: sha256WithRSAEncryption
66:2d:f2:c8:97:34:8d:16:7d:82:d2:f7:1e:30:80:71:3f:de:
e3:5d:27:fe:f8:66:6b:22:91:f0:31:04:7f:49:e3:8e:9a:18:
d6:43:53:0c:1d:74:08:62:c7:47:0d:47:00:bf:0e:ff:0d:2e:
92:ee:d3:ec:85:93:65:27:d5:65:43:d4:88:d2:1f:8a:0c:48:
dd:77:05:27:6a:ae:92:2c:0e:f5:1b:af:a5:0b:58:89:d7:44:
6a:8c:5d:21:c7:b0:8c:22:b0:b4:03:c3:d8:b9:62:05:15:fc:
22:1d:ee:6e:1f:d7:8e:23:d4:da:de:03:c3:74:db:1f:6b:a0:
86:39:ee:70:2f:d6:3f:be:52:6b:17:e4:76:db:ea:93:2a:34:
50:bb:94:5a:53:16:ed:67:5f:b8:30:fc:a2:07:04:d9:cd:3d:
ee:9b:d6:73:36:48:5b:5e:18:cd:b1:f6:ca:01:9e:84:bb:ac:
d4:5b:03:ad:d0:1a:68:84:38:08:3d:10:d6:d9:05:75:4d:be:
29:85:c3:45:52:7e:ff:18:e5:02:6e:3e:d5:6b:68:e3:75:02:
1a:9d:eb:9c:7d:8d:65:09:8f:1b:39:c2:ca:9b:91:c5:01:fa:
26:21:e5:63:a7:f4:df:a0:e4:3f:71:3e:f4:58:7a:96:9e:eb:
81:59:23:7f
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3
N0JCMjRCRDAeFw0yNjAzMTEwNzI2MTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjExOTE2LTMwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8IlCwfN0VHJmMTnV0Chb64yFRzZ5UneKi8xKdBqSamlHCbMIomWXCGZxjlEOz
fAIR/ghq1OttJJf7AOgsx+YbdneBmsC6pxDqOUDaXYK0fMuyvXYREnu6+qJbP1pc
emiwZpnXp4gc3u+bwwiPqJOJSgkzVFPDoWCKopbK8z5OGYwGztDO8VpUUwqTlsIJ
WDw064sjbWrae1HvuUt+DlfZrvFPbYDb++M+a6NANKCVgj769bSoqrSNQ7MlOr+R
JJtjWwYlY4sjE4VylDVVCopgQMoJSjIG5IBp0FZuSZIMuMSILgFnfYwY4s59tgmi
gyxIxI2f67VLnxIkpdzavCEzAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUrpvnf+dh
kV6INsUwGlXiaGy9D90wHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz
RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC85NTcyRkFGNDFE
MUIxMUYxQjYyRUE5QTUxMDNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAIr4hQDBAJnLUQwDQYJKoZIhvcNAQELBQADggEBAGYt8siXNI0WfYLS
9x4wgHE/3uNdJ/74ZmsikfAxBH9J446aGNZDUwwddAhix0cNRwC/Dv8NLpLu0+yF
k2Un1WVD1IjSH4oMSN13BSdqrpIsDvUbr6ULWInXRGqMXSHHsIwisLQDw9i5YgUV
/CId7m4f144j1NreA8N02x9roIY57nAv1j++UmsX5Hbb6pMqNFC7lFpTFu1nX7gw
/KIHBNnNPe6b1nM2SFteGM2x9soBnoS7rNRbA63QGmiEOAg9ENbZBXVNvimFw0VS
fv8Y5QJuPtVraON1Ahqd65x9jWUJjxs5wsqbkcUB+iYh5WOn9N+g5D9xPvRYepae
64FZI38=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:00 2026 by rpki-client